ue5-macos-apple-silicon
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses multiple macOS system utilities (sysctl, sw_vers, df, xcodebuild, mdfind, lipo, file) to discover hardware specifications, OS version, and toolchain paths during the environment audit phase.
- [COMMAND_EXECUTION]: The skill executes local shell scripts provided by the Unreal Engine installation (RunUAT.sh, Build.sh) to perform project compilation, cooking, and packaging.
- [PRIVILEGE_ESCALATION]: The skill identifies and documents requirements for administrative access, specifically for accepting the Xcode license and selecting the command-line toolchain using sudo. It explicitly labels these as manual actions that must be performed by a human user.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading and parsing project-specific configuration files such as .uproject (JSON) and DefaultEngine.ini.
- Ingestion points: references/environment-audit.md reads .uproject and .ini files.
- Boundary markers: None implemented for data interpolation.
- Capability inventory: Significant subprocess capabilities including shell script execution (RunUAT.sh) and system tool calls.
- Sanitization: No specific sanitization or validation of the ingested JSON/INI content is performed before use.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and technical blogs from Epic Games (dev.epicgames.com, unrealengine.com) for toolchain configuration and feature parity verification.
Audit Metadata